McAfee Data Loss Prevention 9.2.2 Product Guide

Managing McAfee DLP systemsManaging users and groups 13With the Filter by options, you can examine results on one or more registered devices within specifictime ranges.• Devices• Time rangesWith the Order by menu, you can examine the results being returned from the systems within specifictime ranges.• Time Trend (Such as hourly or weekly)• Counter Trend (Incidents, Size, Count)Managing users and groupsMcAfee DLP users inherit their privileges from group membership. The system is based on Role‐BasedAccess Control (RBAC), which is used to assign access to users based on the privileges they need toexecute their assignments.Administrators can assign users to the role‐based groups installed on McAfee DLP Manager, customizethose groups, or add new groups. They can also create system or ePolicy Orchestrator database userslocally on McAfee DLP Manager, or imported user accounts from LDAP servers.The primary administrator of a McAfee DLP Manager has all privileges needed to grant access to usersand groups, and can assign those rights to other administrators.Administrators can create failover accounts to allow access if a system component goes down. Theycan also audit user activity, save user logs, or customize their logins and passwords.ContentsManaging user accountsManaging user groupsSet permissionsMonitoring audit logsManaging user accountsUser account types can be reconfigured to assign different privileges, customize login and passwordsettings, or change the account type.Administrators can customize login and password settings for local users, configure different types ofadministrator account, or add configure failover accounts if needed.Configure primary administrator accountsConfigure additional administrator accounts if you are the primary administrator. Do this immediatelyafter the first login to preserve the integrity of the default account.Primary administrators have complete access to all task and policy permissions and are responsible forcreating users and custom user groups. Dividing responsibilities by allocating specific tasks to additionaladministrators is recommended.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Sys Config | User Administration | Groups.• On your McAfee DLP appliance, select System | User Administration | Groups.McAfee Data Loss Prevention 9.2.2 Product Guide 273